{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:LW5P3LZRSSUFYQOJH2R3DG4HPI","short_pith_number":"pith:LW5P3LZR","canonical_record":{"source":{"id":"2010.08762","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-17T10:49:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"56ea38d84cc385116103ea654771f531d587eb7896d0239bb69c686b78f68926","abstract_canon_sha256":"73bfdb4a28d41561501dc151761b774ab0f3cd892d770d280a9391187ae6f444"},"schema_version":"1.0"},"canonical_sha256":"5dbafdaf3194a85c41c93ea3b19b877a129b32084b3f03aa5332ba69a233d81b","source":{"kind":"arxiv","id":"2010.08762","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.08762","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"arxiv_version","alias_value":"2010.08762v4","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.08762","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_12","alias_value":"LW5P3LZRSSUF","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_16","alias_value":"LW5P3LZRSSUFYQOJ","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_8","alias_value":"LW5P3LZR","created_at":"2026-07-05T02:44:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:LW5P3LZRSSUFYQOJH2R3DG4HPI","target":"record","payload":{"canonical_record":{"source":{"id":"2010.08762","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-17T10:49:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"56ea38d84cc385116103ea654771f531d587eb7896d0239bb69c686b78f68926","abstract_canon_sha256":"73bfdb4a28d41561501dc151761b774ab0f3cd892d770d280a9391187ae6f444"},"schema_version":"1.0"},"canonical_sha256":"5dbafdaf3194a85c41c93ea3b19b877a129b32084b3f03aa5332ba69a233d81b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:44:16.226635Z","signature_b64":"9jniR73BwbxGj7u29ypWUNcNSD0k8EYTcK4kv0eTtifucsisWTVggcLNOzOkpit22WxDkMXNcsACCqXdTTSKDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5dbafdaf3194a85c41c93ea3b19b877a129b32084b3f03aa5332ba69a233d81b","last_reissued_at":"2026-07-05T02:44:16.226207Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:44:16.226207Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.08762","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:44:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/AU5k7zdqitoJda3+MfRXeajMwCU2WJ1+jv6u6PNjRKDbhon1sY5CYXnoSMcSqhn8xXkZyeRNNd6fRLmNDOaBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:25:25.345245Z"},"content_sha256":"0be1efaa3bd788429c1a1c7e953ef5fa310b58f30fe14e25f116e24d73c7b35a","schema_version":"1.0","event_id":"sha256:0be1efaa3bd788429c1a1c7e953ef5fa310b58f30fe14e25f116e24d73c7b35a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:LW5P3LZRSSUFYQOJH2R3DG4HPI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Layer-wise Characterization of Latent Information Leakage in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Anastasia Borovykh, Fan Mo, Hamed Haddadi, Mohammad Malekzadeh, Soteris Demetriou","submitted_at":"2020-10-17T10:49:14Z","abstract_excerpt":"Training deep neural networks via federated learning allows clients to share, instead of the original data, only the model trained on their data. Prior work has demonstrated that in practice a client's private information, unrelated to the main learning task, can be discovered from the model's gradients, which compromises the promised privacy protection. However, there is still no formal approach for quantifying the leakage of private information via the shared updated model or gradients. In this work, we analyze property inference attacks and define two metrics based on (i) an adaptation of t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.08762","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.08762/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:44:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u85rECWAUvkeoLfQLkLe6O9dyoqykAIYjdMiPiEGPHLUuzVsp7hfPb5jY+ggnZhR4dg7ctPBDGUfZo9/HMjtBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:25:25.345761Z"},"content_sha256":"c128242bdfb2dc2dc2bbf73506ba145902aaa05677377030c326b7eaeeda1b28","schema_version":"1.0","event_id":"sha256:c128242bdfb2dc2dc2bbf73506ba145902aaa05677377030c326b7eaeeda1b28"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/bundle.json","state_url":"https://pith.science/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T01:25:25Z","links":{"resolver":"https://pith.science/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI","bundle":"https://pith.science/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/bundle.json","state":"https://pith.science/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LW5P3LZRSSUFYQOJH2R3DG4HPI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:LW5P3LZRSSUFYQOJH2R3DG4HPI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"73bfdb4a28d41561501dc151761b774ab0f3cd892d770d280a9391187ae6f444","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-17T10:49:14Z","title_canon_sha256":"56ea38d84cc385116103ea654771f531d587eb7896d0239bb69c686b78f68926"},"schema_version":"1.0","source":{"id":"2010.08762","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.08762","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"arxiv_version","alias_value":"2010.08762v4","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.08762","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_12","alias_value":"LW5P3LZRSSUF","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_16","alias_value":"LW5P3LZRSSUFYQOJ","created_at":"2026-07-05T02:44:16Z"},{"alias_kind":"pith_short_8","alias_value":"LW5P3LZR","created_at":"2026-07-05T02:44:16Z"}],"graph_snapshots":[{"event_id":"sha256:c128242bdfb2dc2dc2bbf73506ba145902aaa05677377030c326b7eaeeda1b28","target":"graph","created_at":"2026-07-05T02:44:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.08762/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Training deep neural networks via federated learning allows clients to share, instead of the original data, only the model trained on their data. Prior work has demonstrated that in practice a client's private information, unrelated to the main learning task, can be discovered from the model's gradients, which compromises the promised privacy protection. However, there is still no formal approach for quantifying the leakage of private information via the shared updated model or gradients. In this work, we analyze property inference attacks and define two metrics based on (i) an adaptation of t","authors_text":"Anastasia Borovykh, Fan Mo, Hamed Haddadi, Mohammad Malekzadeh, Soteris Demetriou","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-17T10:49:14Z","title":"Layer-wise Characterization of Latent Information Leakage in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.08762","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0be1efaa3bd788429c1a1c7e953ef5fa310b58f30fe14e25f116e24d73c7b35a","target":"record","created_at":"2026-07-05T02:44:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"73bfdb4a28d41561501dc151761b774ab0f3cd892d770d280a9391187ae6f444","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-17T10:49:14Z","title_canon_sha256":"56ea38d84cc385116103ea654771f531d587eb7896d0239bb69c686b78f68926"},"schema_version":"1.0","source":{"id":"2010.08762","kind":"arxiv","version":4}},"canonical_sha256":"5dbafdaf3194a85c41c93ea3b19b877a129b32084b3f03aa5332ba69a233d81b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5dbafdaf3194a85c41c93ea3b19b877a129b32084b3f03aa5332ba69a233d81b","first_computed_at":"2026-07-05T02:44:16.226207Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:44:16.226207Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9jniR73BwbxGj7u29ypWUNcNSD0k8EYTcK4kv0eTtifucsisWTVggcLNOzOkpit22WxDkMXNcsACCqXdTTSKDA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:44:16.226635Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.08762","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0be1efaa3bd788429c1a1c7e953ef5fa310b58f30fe14e25f116e24d73c7b35a","sha256:c128242bdfb2dc2dc2bbf73506ba145902aaa05677377030c326b7eaeeda1b28"],"state_sha256":"7b40472f2627d51e8e7962f304082c04bc163e5e6038688912b13486d0cffb27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XO97KuKmeEBUss4M4Ge8md+CofrWahpqgGyFFkOKpRBqTJDGLf35Wl9T2urpqHMu0LURBWtIZd2KhFVefTSqAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T01:25:25.356372Z","bundle_sha256":"c02801aea79302275f7812ab8308f1521c51d5932733a4976194c29243275cae"}}